CVE-2019-15225

In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service memory consumption. This is a related issue to CVE-2019-14993...

CVE-2019-15225

In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service memory consumption. This is a related issue to CVE-2019-14993...

Design/Logic Flaw

In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service memory consumption. This is a related issue to CVE-2019-14993...

CVE-2019-14993 vulnerabilities

Vulnerabilities for packages: istio-pilot-discovery, istio-pilot-agent, istio-cni, istio-operator...

CVE-2019-14993

Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API...

CVE-2019-14993

Technical details for CVE-2019-14993 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, root cause, or remediation are described here.